Trusted Solaris Audit Administration

To Share an Audit File System

  1. In the role admin at label admin_low, open the Trusted Solaris Management Console, Scope=files toolbox.

  2. Navigate to the Storage node, then the Mounts and Shares tool, and double-click the Shares tool.

  3. Enter every local audit file system in the local host's dfstab(4) file.

    Follow the online help to share the /etc/security/audit/hostname directory.

    For example, the audit file server egret has the following entries:

    share -F nfs -o ro -d "local audit files" /etc/security/audit/egret
    share -F nfs -o rw=willet:audubon -d "audit files" /etc/security/audit/egret.1
    share -F nfs -o rw=grebe:audubon -d "audit files" /etc/security/audit/egret.2
    share -F nfs -o rw=sora:audubon -d "audit files" /etc/security/audit/egret.3

    The system willet has the following entry:

    share -F nfs -o ro -d "local audit files" /etc/security/audit/willet